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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may t>e available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timety filed 
after SIX (6) IWONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) IVIONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply vAW, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the OfPce later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

Responsive to communiGation(s) filed on . 

2a)^ This action is FINAL. 2b)n This action is non-final. 

3) 0 Since this application is in condition for allowance except for fonnal matters, prosecution as to the nnerits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Clainfis 

4) ^ Claim(s) 1-6 and 11-18 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) ^ Claim(s) 1-6, 11-18 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) n The specification is objected to by the Examiner. 

10)0 The drawing(s) filed on is/are: a)n accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or fomn PTO-152. 
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application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Claim Rejections - 35 USC § 102 

1. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except liiat an 
international application filed under the treaty defined in section 35 1 (a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

2. Claims 1-6, 1 1-18 are rejected under 35 U.S.C. 102(e) as being anticipated by Paulsen et 
al. 

3. As per claim 1, Paulsen et al, discloses receiving at a network node, a request to assume 
the identity of the network node(see col. 3, lines 33-40, 54-61); detecting whether the request 
originates with a user having a permissible virtual identity characteristic(see col. 5, lines 16-25); 
and if the user has a permissible virtual identity characteristic, providing the network resource 
with the identity of the network node in the place of the identity of the user (see col. 5, lines 16- 
25, col. 15, lines 59-67). 

4. As per claims 2, Paulsen et al. discloses receiving at a preauthorized machine, from a first 
user a request to access a network resource; detecting whether the first user is authorized to 
access the network resource; if so, assigning the first user the identity of the preauthorized 
machine(see col. 5, Hnes 16-25, col. 16, lines 16-21). 

5. As per claim 3, Paulsen et al. discloses receiving, at the preauthorized machine, from a 
second user a request to access a network resource detecting whether the second user is 
authorized to access the network resource; and if the second user is authorized to access the 
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network resource, assigning the second user the identity of the preauthorized machine(see col. 5, 
lines 16-26, col. 6, lines 16-21). 

6. As per claim 4, Paulsen discloses wherein the first and second users are assigned the 
identity of the preauthorized machine during overlapping time periods(see col. 5, lines 16-26), 

7. As per claims 5-6, Paulsen et al. discloses receiving an identifier associated with the first 
user(see col 7, lines 31-50); comparing the received identifier to a table of authorized identifiers 
inherent in authentication(see col. 11, lines 15-65); and determining whether the received 
identifier matches any of the authorized identifiers based on the results of the comparing 
operation(see col. 7, lines 31-50). 

8. As per claim 11, Paulsen et al. discloses receiving at a stateful virtual identity machine 
within a network node, a request fi"om a user to access the network resource; determining if the 
user is authorized to access the network resource; and if so, assigning to the user the identity of 
the stateful virtual machine, and accessing the network resource using the assigned identity(see 
col. 5, lines 16-26, col. 6, lines 16-21). 

9. As per claim 12, Paulsen discloses wherein the network node is an Internet service 
provider(see col. 5, lines 9-12). 

10. As per claim 13, Paulsen discloses wherein the stateful virtual identity machine is pre- 
authorized to access the network resource(see col. 4, lines 23-63, col. 5, lines 9-26). 

11. As per claim 14, Paulsen discloses wherein the stateful virtual identity machine has a 
plurality of logical ports thorough, which the request from the user may be received(see col. 4, 
lines 22-26). 
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12. As per claim 15, Paulsen discloses to be executed by a processor to implement a method 
for accessing a network resource on the Internet, receiving at a network node, a request from a 
user to access the network resource; and if so, accessing the network resource on behalf of the 
user, using the identity of the network node(see col. 5, lines 16-25, col. 15, lines 59-67). 

13. As per claim 16, Paulsen et al. discloses wherein the network node is an Internet service 
provider, because Paulsen discloses the Intemet(see col. 5, lines 9-12). 

14. As per claim 17, Paulsen et al. discloses wherein the network node is pre-authorized to 
access the network resource(see col. 5, lines 9-12). 

15. As per claim 18, Paulsen et al. discloses wherein the network node has a plurality of 
logical ports through which the request from the user may be received, because Paulsen discloses 
a virtual private network(see col. 4, lines 22-26). 

16. Claims 7-10 are allowable for the features of, "associating with each authorized machine 
an access table storing authorization information", verifying that the requester is authorized to 
access a resource on the web server with reference to the access table associated with the 
authorized machine to which the requester is coupled". Prior art fails in networking a security 
fails to disclose, "associating with each authorized machine an access table storing authorization 
information", verifying that the requester is authorized to access a resource on the web server 
with reference to the access table associated with the authorized machine to which the requester 
is coupled". 
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Response to Amendment 

17. First, the Applicant states that Paulsen fails to teach receiving at a network node, a 
request to assume the identity of the network node, and providing the network resource with the 
identity of the network node in place of the identity of the user. The user of Paulsen request 
access to resource on the network, the user is authenticated by the host(see col. 7, lines 31-54). 
Once the user is authenticated the remote client from which the user is using, is a virutal node on 
the network in able to access resources; thus, the user assumes the identity of a network node to 
access resources on the network(see col. 15, lines 63-67). The Applicant states that Paulsen does 
not disclose assigning a user the identity of a pre-authorized machine. The Examiner disagrees, 
with the Applicant, the nodes of Paulsen are already created, Paulsen discloses that a private 
network, includes a host computer and a plurality of nodes(see col. 5, lines 9-13). Thus, when 
the user assumes the identity of one of these nodes that are already preauthorized, because this 
nodes are attached to the private network(see col. 5, lines 35-48). 

Final Action 

18. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
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will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jenise E Jackson whose telephone number is (571) 272-3791. 
The examiner can normally be reached on M-Th (6:00 a.m. - 3:30 p.m.) alternate Friday's. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Ayaz 
Sheikh can be reached on (571) 272-3795. The fax phone number for the organization where 
this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be 
obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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